Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa
File:                     c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa (raw, json)
Hash identifier:          m/SOwkMVy++nroYHehB4zGD1gHEOwWiPb7l9jy0TOnM=
Subject key identifier:   B4:1B:ED:1E:8D:78:FD:59:A1:14:11:E8:B0:CB:D4:FE:9A:81:D8:55
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285849244E860677ABF05A441FE400
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        199.45.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:86:06:77:ab:f0:5a:44:1f:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=35089a5d-1649-436f-b075-a1c313e369a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:bf:e1:64:32:69:e2:e8:c0:e1:e7:4c:ef:
                    da:ee:56:54:ab:e7:b0:36:80:0d:64:4c:ad:ca:69:
                    78:80:d9:cf:e3:d0:8c:ac:a1:bf:3c:08:c0:c7:a4:
                    bc:ae:43:f8:15:63:87:d6:1c:f0:61:cc:45:b2:73:
                    08:9a:0b:f8:5e:c9:fe:bb:82:92:07:54:8e:76:3d:
                    dd:0b:e2:3e:51:44:07:91:73:7e:d7:15:be:49:f1:
                    61:70:7f:2d:52:07:f3:f0:cf:76:86:10:1c:81:0c:
                    56:c1:4b:ba:62:be:e1:52:70:06:86:ae:f3:41:4c:
                    b8:60:9f:55:b2:ae:67:f5:c7:ed:85:a0:6b:1d:aa:
                    94:1d:90:3a:d4:59:08:63:04:fa:15:16:41:65:d3:
                    15:d7:ef:8d:da:fa:05:f5:ba:c7:c5:f3:09:45:d1:
                    b7:2c:42:8b:a1:14:4d:87:c2:64:8f:ba:82:53:ac:
                    23:a5:a3:f9:5c:8c:dc:59:4f:fb:e3:e2:5b:48:aa:
                    cb:c1:92:04:bb:25:a6:ab:fa:eb:02:8a:10:ae:eb:
                    70:e6:5f:4f:f3:a3:c7:c9:88:2f:9b:88:74:5f:49:
                    40:69:89:56:ba:10:ab:f6:23:04:ac:7a:2b:e3:54:
                    4b:14:e4:f6:fc:f6:3e:85:48:35:af:53:24:8b:e9:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:ED:1E:8D:78:FD:59:A1:14:11:E8:B0:CB:D4:FE:9A:81:D8:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:08:c5:59:50:cc:aa:e8:83:bf:62:57:f6:3b:15:80:90:
         1b:be:ff:42:2a:02:82:10:c9:23:34:9c:df:bc:cd:33:5b:67:
         3b:a5:4e:22:2a:97:91:cb:63:84:6e:e4:73:a1:d2:f7:2c:e5:
         2a:6a:50:cb:e8:93:b4:5c:17:d1:95:a0:0f:10:00:7c:3a:9f:
         ad:02:13:20:20:fb:03:0e:63:86:a6:b3:66:e7:f9:9c:86:79:
         28:2a:8f:5e:14:f4:02:02:5d:ab:a1:2a:38:ce:4d:c2:c6:65:
         ec:7e:25:47:27:a4:87:44:2e:10:da:df:dd:16:2a:e3:e0:7c:
         5b:f1:0b:5a:97:c8:d4:f4:be:8f:33:1b:df:39:ac:27:97:8b:
         ad:6f:20:62:34:ab:cc:bc:00:8a:7b:b8:9d:fd:16:82:b0:ef:
         d4:0c:27:77:ab:7f:cf:9c:f4:07:3d:95:62:07:60:bb:7c:78:
         69:3f:88:ee:c2:d6:d2:d5:4e:24:ce:3e:9f:99:f5:56:98:43:
         d5:2f:6e:5a:bb:8a:6c:07:59:9e:09:da:da:e3:23:39:7c:6a:
         68:2e:f3:30:78:6c:98:16:01:5c:d1:77:0b:16:b6:d7:20:f6:
         0b:75:a6:06:1e:b5:2a:23:61:bf:74:15:00:02:25:c4:78:ca:
         17:06:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:37 2025 by rpki-client